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Using that 
^value of /c, does a predefined^ 
mathematical function employing M 1 
and g k produce a result 
equivalent 
toM 2 ? 
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Obtain a message M having two portions, wherein M 1 is one of 
the portions of M and M 2 is another 
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Select a new value of a variable key (k) 
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Calculate two or more codes (e.g., rand s), where each 
calculation incorporates k but does not employ M 2 
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Produce a cipertext signature for the original message M that 
is a combination of M 1 and the two or more of the calculated 

codes 
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Obtains a digital signature (DS) having at least three portions, 
M v r, and s. It may also have more portions, such an 
authentication tag (auth). 



Using a 1st predefined mathematical function employing M p r, 
and s, calculate the value of gk 
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Does a 2nd predefined 
'mathematical function employing^ 
M 1 and gk produce a value 
equivalent to r? 



-> Invalid 
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Using a 3rd predefined mathematical function employing M 1 \ 
and gk , calculate the value of M 2 
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Produce a message M that is a combination of M 1 and M 2 | 
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If the process of $ig,. 2 indicates that digital signature (DS) is 
validated, then further test DS using a secret "backdoor" key (BK) 
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